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Description 

Network, in particular PA PROFIBUS network, provided with 
redundancy properties, a branching unit for a user device in 
said network, redundancy manager for said network and method 
5 for operating said network 

The invention relates to a network, In particular a PA 
PROFIBUS network, with redundant properties in accordance with 
the preamble of claim 18, a branching element for a user 
device in said network in accordance with the preamble of 
10 claim 8, a redundancy manager for said network in accordance 
with the preamble of claim 13 and a method for operating said 
network in accordance with the preamble of claim 17. 

In automation systems for manufacturing or process technology 
with "classic" wiring of field devices, for example 
15 measurement converters and/or control elements, in which the 
field devices are connected in each case via a 4-wire master 
cable and subdistributors by a separate pair of wires to a 
programmable logic controller, the failure of one of the field 
devices or of a transmission link to this field device has no 
.20 effect on the function of a field device since the individual 
field devices are operated physically separated from one 
another. 

With field devices which communicate via a field bus with the 
programmable logic controller, the bus cable forms a common 

25 component for all field devices and if it fails it affects all 
field devices. In addition errors in the field devices, for 
example a short circuit of the transmission line or sending 
out of noise signals on the transmission line, can adversely 
affect communication of the other field devices connected the 

30 bus cable. Because of the possibly reduced system availability 
field buses are not used in particularly critical applications 
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or must be configured to provide redundancy. 



In principal a distinction must be made between two different 
redundancy concepts in automation technology systems. On the 
one hand system redundancy improves the availability through a 
5 redundant, that is largely duplicated structure of the 

complete system, consisting of field devices, a bus system and 
programmable logic controllers. Coordination, i.e. which of 
the components must actively be operated at any given time and 
which are in standby mode is undertaken at programmable logic 

10 controller level and the controllers must be configured for 
this purpose. All other components are standard components. 
The other concept is media redundancy in which with the 
transmission media only the part of the communication system 
is arranged redundantly of which the failure would have 

15 particularly serious effects on the system availability. For 
example a high-availability field bus system is known from EP 
0 287 992 B2 which features two bus lines over which identical 
messages are transmitted serially in each case. With a 
detector logic which is located in the connected users, test 

20 characters are evaluated for testing the function of the 

busses. If there are errors in the test character there is a 
switchover to receive by the other error-free bus. The 
redundant configuration of the transmission medium thus 
increases the availability of the bus system. 

25 An Ethernet network with redundancy properties is known from 
EP 1 062 787 Bl. The Ethernet network has a linear topology. 
The line ends are connected to a redundancy manager. The 
rediindancy manager uses test telegrams to check the state of 
the network. If there is an interruption of the network the 

30 redundancy manager connects the line ends and thereby re- 
establishes a line structure and the operability of the 
network. The disadvantage here is that the test telegrams 
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which are injected by the redundancy manager into the two ends 
of the line represent an additional network load for the 
network and thus reduce the transmission capacity of the 
network. This monitoring and switchover principal is also not 
5 simply transferable to bus systems in which, in addition to 
transmission of the data, the energy required for operating 
the user devices connected to the bus is transmitted over the 
bus . 

The object of the invention is to create a network, in 
10 particular a PROFIBUS PA network with redundant properties and 
the option of remote power feeding of user devices, a 
branching unit for a user device in said network, a redundancy 
manager for said network and a method for operating said net 
work, through which an increase in the availability of the 
15 network can be achieved with simple means. 

In accordance with the invention the object is achieved by the 
network specified in claim 1, the branching unit specified in 
claim 8, the redundancy manager specified in claim 13 or the • 
method specified in claim 17. Advantageous developments of the 
20 network, the branching unit and the redundancy manager are to 
be found in the subclaims. 

The advantage of the invention is that the redundancy manager 
enables an error in the network to be detected and rectified 
comparatively rapidly. With an interruption or a short circuit 

25 in a cable segment no feed voltage is directed to this segment 
by the connected branching unit of a user device which in the 
positive case should be feeding over the segment the energy 
required for operation of the devices located beyond the 
segment, no feed voltage is routed on this segment or the 

30 forwarding of a feed voltage on this segment is interrupted. 
This means that the feed voltage no longer reaches the other 
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end of the line which is connected to the redundancy manager. 
This is detected by the redundancy manager, which a short time 
after establishing the error state also feeds the required 
operating energy into the other end of the line. The defective 
5 cable segment is isolated by the two delimiting branching 
units and the network continues to be operable despite the 
error without any long interruption to operation. The 
communication in the network is also maintained in the event 
of an error without a higher -ranking network, especially a 
10 control system to which the network is connected, being 
disturbed or called on in any other way. 

By contrast with the method known from EP 1 062 787 Bl 
mentioned a above, in which the status of the network is 
checked with a test telegrams, the invention has the advantage 

15 that errors are able to be detected as soon as they have 
occurred and not just at the point at which test telegrams 
have been sent through the network. The reaction time of the 
known method of can be improved by increasing the frequency of 
the test telegrams, i.e. reducing the cycle time of the test 

20 telegram injection. However this would bring with it the 
disadvantage that the test telegrams would represent a 
significant additional network load. By contrast the invention 
advantageously completely avoids any additional load on the 
network with test telegrams. 

25 A further advantage can be seen in the fact that the 

redundancy manager and the branching units of the present 
invention do not have to participate in data traffic in the 
sense of data processing. Therefore the implementation effort 
is lower, the power requirement is reduced and the 

30 availability is increased because of the lower device 

complexity. The expansion of an existing network by redundancy 
properties is more simple to implement. 
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Because the redundancy manager and the branching units are 
each provided with a termination element (terminating 
resistor) which can be connected in the case in which they are 
located at the end of the line in the relevant network 
5 topology, the signal transmission properties of the 

transmission link can be flexibly adapted to the prevailing 
topology after topology changes and thus the network is also 
suitable for higher baud rates . 

Advantageously and especially simple implementation of a 
10 branching unit is achieved if this is provided with at least 
two switches and with a control unit, with the control unit 
being able to set the two switches so that the user device 
connected by the relevant branching unit to the network can be 
connected through to the one, to the other or to both network 
15 connections of the branching unit to obtain operating energy 
and for data transmission. 

Advantageously it is made especially simple to test a cable 
connected to a branching Tinit for a short circuit or 
interruption if the branching unit features a resistor network 
20 in which the switches are arranged and when the switches can 
be controlled by the control unit such that current and/or 
voltage of the cable connected to the one or to the other 
network connection of the branching unit can be checked. 

Since the switching times of the switches are not infinitely 
25 short the operating energy injected at the line end or line 

ends can be made available to the user devices in the event of 
an error in an uninterruptible manner. To resolve this problem 
at least one of the branching units, but especially each of 
them, features an energy store which at least in the fault- 
30 free state can be charged by the feed voltage; The branching 
unit is embodied to record the voltage present at the 
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connected user device and in the event of a voltage deficit to 
connect the energy store to the user device. 

As already mentioned; one advantage of the invention is that 
the redundancy manager and the branching unit do not have to 
5 take part in data traffic. An error, such as an interruption 
or a short circuit in a cable segment, can thus be displayed 
easily by the two branching units on both sides of the error 
location locally, for example using a light-emitting diode, 
however the redundancy manager can only detect the error 

10 status but not the error location. To enable the error 
location to be determined as well the redundancy manager 
advantageously features means which record the timing of the 
voltage and/or the current at the one end of the line during 
the forwarding of the feed voltage by the individual branching 

15 unit and from this determines the number of branching units up 
to the error location. The redundancy manager can display this 
information about the error location and/or notify a higher- 
ranking control system about it so that it can be established 
centrally where the error has occurred and is to be repaired. 

20 The redundancy manager thus preferably also has a 

communication interface for connection and exchange of data 
with a higher-ranking network in which the control system can 
be located. 

By recording changes in the voltage and/or the current at at 
25 least one of the two line ends the redundancy manager can 

determine state transitions of the network and thus establish 
when an error has been repaired. 

To extend the redundancy of the inventive network beyond the 
redundancy manager through to a higher -ranking network, for 
30 example one containing a control system, the redundancy 

manager is preferably able to be connected via at least two 
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segment couplers to at least two communication channels of the 
higher-ranking redundant network and is further embodied to 
monitor the functionality of the segment couplers and 
depending on the lists, to select one of the segment couplers 
5 for connection with the network. 

The invention, along with its embodiments and advantages, is 
explained in greater detail below with reference to the 
drawings in which an exemplary embodiment of the invention is 
shown. The figures show: 

10 Figure 1 a block diagram of a part of a automation technology 
system, 

Figure 2 a block diagram of a redundancy manager, 

Figure 3 a block diagram of a part of a automation technology 
system in an alternate embodiment to Figure 1, 

15 Figure 4 a block diagram of a branching unit. 

Figure 5 a state table of a control unit of a branching unit. 

Figure 6 a state diagram corresponding to the state table 
shown in Figure 5 and 

Figure 7 a basic circuit diagram of an expanded branching 
20 unit. 

Figure 1 shows a part of an automation technology system. A 
control system! is connected to a bus system 2 in accordance 
with the PROFIBUS DP Specification. The bus system 2 can be 
configured as a simple system, or to provide redundancy as 
25 shown here. At each of the two communication channels 3, 4 of 
the bus system 2, as well as other devices not shown here, for 
example automation units, a link 5 or 6 is connected in each 
case. The link 5 is linked to a segment coupler 7 which is 
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connected via a drop cable 8 to a port Al of a redvindancy 
manager RM. The other link 6 is linked to a further segment 
coupler 9 which is connected via a further drop cable 10 to a 
port A2 of the redundancy manager RM. A network 11 which 
5 complies with the PROFIBUS PA specification and has a linear 
topology is connected to two further ports Bl and B2 of the 
red\indancy manager RM. The one line end El of the network 11 
is formed by the end of the trunk cable H3 connected to the 
port Bl, which at its other end is connected to a network 

10 connection of a branching unit T2 . The branching unit T2 and 
further branching units Tl, T3, T4 serve to connect field 
devices Fl, F2 , F3 , F4 as user devices to the network 11. In 
this case the field devices F1...F4 are each connected via 
drop cables SKI, SK2, SK3 or SK4 to the relevant branching 

15 units Tl . . .T4 . 

So that a continuous line as a structure of the network 11 is 
achieved the other network connection of the branching unit T2 
is linked by a trunk cable HI to a network connection of the 
branching unit Tl, the other network connection of the 

20 branching unit Tl by a trunk cable H2 to a network connection 
of the branching unit and T3 and the other network connection 
of the branching unit T3 by a trunk cable H4 to the network 
connection of the branching unit T4 . The other network 
connection of the branching unit T4 is connected by a trunk 

25 cable H5 to the port B2 of the redundancy manager RM. The end 
of the trunk cable H5 located at the port B2 represents in the 
error-free case a second line end E2 of the linear network 11. 

Via the trunk cables H3 , HI, H2 and H4, as well as the data, 
energy to operate the field devices F1...F4 is also 
30 transmitted. To this end each of the two segment couplers 7, 9 
contains a direct current source and feeds direct current into 
both wires of the associated stub line 8 or 10. The redundancy 
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manager RM selects one of the two redundant segment couplers 
7, 9, in this case for example the segment coupler 7, and when 
the system starts up switches the relevant port Al directly to 
port Bl so that the feed voltage made available by this 
5 segment coupler 7 is also present at port Bl. In the error- 
free case the branching units T1...T4 forward the feed voltage 
arriving in each case on the one network connection to the 
other network connection. This means that the feed voltage is 
successively switch through to the line end E2, which is 

10 located at port B2 of the redundancy manager RM. The 

redundancy manager RM monitors the incoming voltage at its 
port B2 . If, after a delay depending on the network 
configuration, this does not comply with a predetermined 
required value, it is clear that there is an error present in 

15 network 11. This can for example be a short circuit or an 
interruption in one of the trunk cables H1...H5.' 

An interruption of the trunk cable H2 between the branching 
units Tl and T3 will now be considered by way of an example, 
as is indicated in Figure 1 by a dashed interruption line 12. 

20 This type of interruption is detected by the branching unit Tl 
which subsequently does not forward the feed voltage so that 
the branching units T3 and T4 as well as the port B2 of the 
redundancy manager RM are no longer reached. The redundancy 
manager RM detects the absence of the feed voltage at port B2 

25 and subsequently applies a voltage to supply the field devices 
F3 and F4 which lie beyond the error location, i.e. in the 
example described, beyond the interruption 12, to its port B2 . 
It does this by connecting the ports Bl and B2 and thereby the 
line ends El and E2 to each other. The supply voltage is 

30 switched through from port B2 via the branching unit T4 to the 
branching unit T3 which lies immediately beyond the error 
location, detects the error 12 and thus does not forward the 
supply voltage. With the establishment of the supply voltage 
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for all field devices F1,..F4 the data transmission in the 
network 11 and thereby the further operation of the network 11 
is safeguarded despite the error 12 . 

The method of operation described on start-up of the network 
5 11 can also contain further steps in which data will be 
exchanged between the branching units and the redundancy 
manager and/or in the reverse direction with a method not 
described in any greater detail here. Such an exchange of data 
enables the reliability of the network 11 to be increased and 
10 its start up and error detection also simplified. 

The redundancy manager RM shown in the example in Figure 2 
contains a first control unit RCMA assigned to the ports Al 
and A2 , a second control unit RCMB assigned to the ports Bl 
and 32 and higher -ranking controller RMC. The ports Al, A2 , Bl 

15 and B2 are interconnected via a switching network with 

switched RMSl, RMS2 and RMS3 , with switch RMSl which can be 
controlled by the first control unit RMCA being used for 
selection of the two ports Al, A2 and the switches RMS2 and 
RMS3 which can be controlled by the second control unit RMCB 

20 connecting the relevant selected port Al or A2 either with one 
of the two ports Bl and B2, with both ports Bl, B2 or with 
neither of the ports Bl and B2 . The ports Bl and B2 have 
termination elements BTl, BT2 in the form of terminating 
resistors, which can be activated or deactivated. 

25 The first control unit RMCA monitors the currents and/or 

voltages at the ports Al and A2 and in this way can monitor 
the segment couplers 7 and 9 (cf . Figure 1) and in the event 
of an error initiate the switchover from the faulty segment 
couplers to the others. The second control unit RMCB monitors 

30 the currents and/or voltages at the ports Bl and B2 and thus, 
as already explained above, can detect whether an error is 
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present in the network 11 and whether accordingly one of the 
two ports Bl and B2 is to be connected to the relevant 
selected port Al or A2 . In addition, as will be explained 
later, the second control unit RMCB can detect whether the 
5 error has been rectified in the network 11 and accordingly 
actuate the switches RMS2 and RMS3 . 

The higher-ranking control RMC is connected to the two control 
units RMCA and RMCB and has a coiranunication interface RMI, in 
this case a PROFIBUS slave interface, for connection to the 
10 relevant selected port Al or A2 . This enables the redundancy 
manager RM to communicate with the higher-ranking control 
system 1 in order for example to transmit status information 
so that suitable measures can be taken to rectify the error, 
or to receive configuration commands. 

15 Like the redundancy manager RM The branching units T1...T4 

also have connectible termination elements which are connected 
in if they are located at the end of a line in a linear 
topology to avoid signal reflections at the line end. In the 
error-free case the termination element BT2 is connected in 

20 the redundancy manager RM at the port B2 in the example 

explained on the basis of Figure 1; The termination element 
BTl is separated from the corresponding port Bl. If an error 
occurs as has been explained in the example by the 
interruption 12 the redundancy manager RM separates the 

25 termination element BT2 from the port B2 and the branching 
units Tl and T3 lying on either side of the error location 
activate their relevant termination element. This means that 
even if the line ends are shifted signal reflections are 
effectively suppressed. 

30 The termination of the cable with a terminating resistor at 
the two ends of the trunk cable is required for a number of 
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reasons : 

1. The bus signal is defined as a current signal with +10 mA 
which creates via the terminating resistors with two 
parallel-switched 100 Ohm resistors which correspond to a 

5 50 Ohm resistance a defined voltage drop of +0.5 V. 

2. The maximum echo delay time in the cable of appr. 20 lis 
lies at 2 km in the order of magnitude of a signal half 
wave with approximately 16 us, so that strong reflections 
would lead to bit errors. The overlapping should have 

10 ' settled down after a maximum of 2 0% of the duration of a 

half wave, corresponding to a line length of less than 300 
m. Accordingly the lEC standard only allows drop lines of 
up to max. 12 0 m in length, with inherently secure networks 
of up to max. 30 m in length. 

15 Figure 3 shows an embodiment of the automation system as per 
Figure 1 in which the redundancy manager RM is embodied in two 
parts. The first redundancy manager part RMl features the 
ports Al and Bl with which it is connected to segment coupler 
7 or to the line end El of the network 11. The other 

20 redundancy manager part RM2 features the ports A2 and B2, with 
which it is connected to the segment coupler 9 or to the line 
end E2 of the network 11. As is indicated by the dashed line, 
the redundancy manager RMl and the associated segment coupler 
7 including the direct current source contained in it and if 

25 nec. the link 5, can be grouped together in a first component 
13 and the other redundancy manager RM2 with the segment 
coupler 9 and the associated direct current source and if nec. 
the link 6, can be grouped together in a second component 14. 
The exemplary embodiment shown here has the advantage that the 

30 network 11 does not have to be in the form of a ring because 
the ring is not closed at the line ends El and E2 but via the 
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redundancy manager partslB, 14, the segment couplers 1 , 9, the 
links 5, 6 and the field bus system 2. 

The basic structure of a branching unit is described in 
greater detail below with reference to the example of the 
5 branching unit Tl in Figure 4. The branching unit Tl 

establishes the connection between the pairs of wires of the 
trunk cables HI and H2 and the drop cable SKI. The trunk 
cables HI and H2 are connected to the network connections NWl 
or NW2 of the branching unit Tl. As well as the data, the 

10 energy to operate the field devices is also transmitted over 
two pairs of copper wires Hla and Hlb, H2a and H2b, as well as 
Sa and Sb of the cables HI, H2 or SKI. To this end, as already 
mentioned, the segment couplers 7 and 9 (cf . Figures 1 and 3) 
each contain a direct current source, with the segment coupler 

15 7 selected by the redundancy manager RM injecting a direct 
current into the two wires of the transmission cable. The 
field devices F1...F4 each take a proportion of the direct 
current and overlay the direct current with an alternating 
current which contains the information to be transmitted. The 

20 branching unit Tl features a control unit ST, which with the 
aid of currents II, 12 and/or voltages Ul, U2 , which are 
measured on the trunk cables HI and H2 , monitors the state of 
the connected cables HI and H2 and also monitors the voltage 
U3 on the drop cable leading to the field device Fl. 

25 Furthermore the branching unit Tl contains a resistance 
element BT, four switches SO, SI, S2 and S3, a resistance 
network consisting of resistors RO, Rl and R2 for voltage 
measurement and an energy accumulator C in the form of a 
capacitor. The position of the switches SO.. ".53 is 

30 predetermined by the control unit ST depending on the recorded 
currents II and 12 and/or of the measured voltages Ul, U2 and 
U3 . The terminating element BT which can be connected with the 
aid of the switch SO for the case in which the branching unit 
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Tl is located at the end of a line, corresponds to a standard 
terminating resistor of the PROFIBUS PA bus system. The size 
of the resistors RO, Rl and R2 is selected so that the state 
of the connected cables HI and H2 can be deteimined in the 
5 optimxam way. They are in this case preferably arranged to be 
of such high resistance that the current flowing over them is 
very small by comparison with the current which flows in 
normal operation over the cables HI and H2 . In this case the 
line resistances of the cables HI and H2 are negligibly small. 

10 The functioning of the branching units Tl . . . T4 is explained 
in greater detail below with reference to the state table 
shown in Figure 5 for the control unit ST of the branching 
unit Tl. For the sake of simplicity it is assumed that the 
three resistors RO, Rl and R2 have the same resistance value. 

15 Beginning from the left, the current state of the control unit 
ST, test criteria for a state transition relating to the 
voltage Ul and a power ratio K = U2/U1, the settings of the 
switches SO, SI and S2, the next state and remarks about the 
case concerned are entered in the columns of the table. The 

20 IDLE state specified in the table corresponds to the basic 

state which is assumed if the two trunk cables HI and H2 are 
not carrying any voltage; I.e. the checked voltages Ul and U2 
are equal to zero or at least smaller than a comparison 
voltage UO, which is to be defined in a suitable manner 

25 depending on at the relevant feed voltage. The same applies to 
a comparison current 10 with which the currents 12 and II can 
be compared. In this state the switches SI and S2 are in the 
"on" position, as is specified in the table in the columns in 
the relevant row of the IDLE state of belonging to the 

30 switches SI and S2 . Since the IDLE state is retained the IDLE 
state is again specified in this case in the column "next 
state". In the column "K = U2/U1" examples of the voltage 
ratio between the voltages U2 and Ul are specified for which 
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overshoots and undershoots are monitored by the control unit 
ST. Depending on the result of the comparison, a transition is 
made from a current state into a next state. For example the 
entry in the column "K = U2/U1" of the first row of the state 
5 TEST', means that there will be a transfer into the follow-up 
state TEST2 if the voltage ratio K lies between 1/10 and 2/5. 
The determination of the comparison values, here for example 
1/10 and 2/5, with which the current voltage ratio K 
determined by the control unit ST is compared, depends on 

10 various peripheral conditions, especially the size of the 
resistors RO, Rl and R2 and is only specified here as an 
example. When a feed voltage US is switched on in the segment 
coupler 7 (Figures 1 and 3) this voltage is fed via the 
redundancy manager RM, the branching unit T2 and the trunk 

15 cable Hi to the network connection NWl of the branching unit 

Tl and Ul = US > UO applies. The control unit ST thus switches 
from the IDLE state into the TESTl state and measures the two 
voltages Ul and U2 . If the trunk cable in the subsequent 
segment, here the trunk cable H2 is short-circuited, the 

20 voltage drop over the resistor RO will be very much greater 
than the voltage U2 measurable at the network connection NW2 
or at the cable H2 ; i.e. K = U2/U1 < 1/10. This corresponds to 
the second row of the state TESTl in the table. Because of the 
result of this test the state SHORT is assumed as the next 

25 state. In this case the switch S2 remains in the "on" position 
and the short-circuited trunk cable H2 is disconnected from 
the cable segment lying in front of it, the trunk cable HI. 
The connection via the high- impedance resistor RO can in this 
case be ignored. Simultaneously the line end produced in this 

30 way is terminated by switching over the switch SO to the 

position "on" via the termination element BT with the correct 
surge resistance. 



In accordance with first row of the state TEST2 there is a 
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transition from this state into the state OK if the voltage 
ratio K lies between 1/10 and 2/5. In the state OK the 
switches SO, SI, S2 are in the "off" position and both trvmk 
cables HI and H2 connected to the branching unit Tl are in 
5 order. Further distinctions between cases and state 

transitions which are produced by the various measurements of 
the voltages Ul and U2 by the control unit ST can be seen from 
the state diagram in Figure 6 . 

In the example explained above the feed voltage was fed to the 
10 branching unit Tl via the trunk cable HI. If this voltage is 
fed alternately via the trunk cable H2 the associated state 
table can be simply obtained by swapping over the indices for 
the voltages Ul and U2 . 

The states SHORT (trunk cable H2 short circuited) and OPEN 
15 (trunk cable H2 open circuited) are error states which lead to 
the injection of the feed voltage by the redundancy manager RM 
via both ports Bl and B2 . If the error concerned is rectified 
the branching unit Tl involved is initially switched to the 
state IDLE. Since the switch SO is in the "off" position and 
20 in this case, the linear network 11 fed from both sides has no 
line termination. This leads to an increase in the signal 
amplitude which is detected by the second control unit RMCB of 
the redundancy manager RM and which causes the latter to open 
the switch RMS3 and thus cancel the power feed at the port B2 
25 again. As a result of the now error-free Network 11 the actual 
operating state OK is reached via the state TESTl . 

In the exemplary embodiment described the determination of the 
state of the cable segment to be monitored uses the ratio 
between output and input voltage of the branching unit. 
30 Instead this state can also for example be determined from the 
absolute values of the voltages and the currents. 
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The capacitor C shown in Figure 4 is used to ensure an 
interruptible power supply for the user device Fl connected to 
the branching unit Tl even in the period caused by switching 
delays between the occurrence of an error and the 
5 establishment of the alternate energy supply. To this end the 
capacitor C is charged with the feed voltage in the operating 
phase if at least one of the switches SI, S2 is in the "off" 
position via a decoupling diode Dl and a charge resistor R3 • 
The control unit ST monitors the voltage U3 present on the 
10 ' drop cable SKI to the user device Fl and switches the 

capacitor C via the switch S3 to the drop cable SKI if it 
detects a voltage U3 which is too low. The decoupling diode Dl 
and a further decoupling diode D2 prevent a flow back of 
energy into the network 11. 

15 A RESET of the system can be initiated manually automatically 
by the redundancy manager RM and briefly switching off the 
feed voltage to the ports Bl and B2, after which via the IDLE 
state a new test cycle is initiated, running through the TEST* 
and TEST2 states. 

20 The einbodiment of a network described has the advantages that 
the branching units can draw their comparatively low operating 
energy from the trunk cable, the control units ST of the 
branching units operate independently and the signal path can 
be embodied as a passive path since there are only resistors 

25 and switches between the network connections of the branching 
units. An active solution, for example with a signal refresh 
as with repeaters is however also possible. 

In Figure 6 the states and state transitions of the table from 
Figure 5 are shown once again for a better overview in the 
30 form of a state diagram which * describes the same behavior of 
the control unit ST as the table. The following applies to all 
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states: For Ul < UO a RESET is perfoinned by the redundancy 
manager RM and the sequence begins with the IDLE state. 

For the exemplary embodiment described above a short circuit 
in the drop cable SKI is not dealt with. It are can however be 
5 expanded in a simple manner so that all cables connected to a 
branching unit can be monitored. Figure 7 shows a basic 
circuit diagram of a branching unit T5 expanded in this way 
which by comparison with the branching unit Tl explained with 
reference to Figure 4 has been expanded by a switch S4 and 
10 resistors R4, R5 and R6, The principle of monitoring three 
cables is similar to the monitoring of two cables described 
above and can thus be understood per se by person skilled and 
the art with reference to Figure 7 . 

In the exemplary embodiment described the branching units are 
15 set up separately from the field devices and merely connected 
to the latter via a drop cable in each case. As an alternative 
to this a branching unit can be integrated into the housing of 
the field device concerned. 

Alternatively to the branching \init shown in Figure 4 with a 
20 drop cable connection it is possible to embody the unit 

without a drop cable connection or not connect a drop cable. 
This makes it possible to divide the network line up into 
predetermined line segments which can be monitored 
individually. Errors can be localized and rectified more 
25 simply in this way. 

A further alternative is to equip the branching units with a 
number of drop cable connections for field devices. 



If the error is to be repaired after the error location has 
been determined, unstable states for example in the form of 
30 intermittent contacts can occur by which operation of the 
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system will be adversely affected. To avoid this provision can 
be made for fixing the states at the network connections of 
the branching unit which can for example be done by a short 
circuit connectors which are then removed again after repair. 
5 This state fixing can also be used with the corresponding 
layout for explicitly deactivating individual cable segments 
and thus makes maintenance work easier in an explosion-hazard 
area. In this case there is the option of mechanically 
covering the terminals of the network connections which may 
10 not be worked on, with the coverings being designed so that 
when they are removed both the short circuit mentioned above 
the occurence of sparks which are capable of ignition arising 
is prevented. 



